Be It Known That We, John R. Tuttle, a citizen of the United 
States of America, resident of Boise, County of Ada, State of 
Idaho, James C. Springett, a citizen of the United States of 
America, resident of La Canada, State of California, and Eugene 
?• Hoyt, a citizen of the United States of America, resident of 
Colorado Springs, State of Colorado, have invented a new and 
useful 

Modulated Spread Spectrum in RF Identification Systems Method 
of which the following is a specification: 
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^ ^7 Specification 



This invention relates to data communication with low power 
radio frequency (RF) transceivers, specifically to data 
communication between RF identification (RFID) tags and an 
5 operator (interrogator), and more particularly, to using spread 
spectrum techniques to simplify the tag receiver design, reduce 
tag cost, increase the range and reduce interference on the RF 
communication channel, 

lU Background of the Invention 

fS An RFID tag is a small radio transceiver that can be 

attached to a movable article to help keep track of its 
^ whereabouts and status. A small, ll^^c!^^^^ inexpensive tag is 
^ desirable. To miniaturize the tag, the size of the circuitry is 
,15 reduced by using an integrated circuit (IC) design. The simpler 
jny the circuit, the smaller the resulting IC becomes^ thereby 
W reducing the cost. 

4| Operational environment factors can disrupt the reliability 

of these weak communication links. Reflective and refractive 

20 properties of the environment introduce possible multipath 
errors, and outside RF sources introduce interference in the 
received signal. 

Summarv of the Invention 

'25 The^- tpriiic'iple - object of this invention is to provide a 

method by which an RFID tag can communicate more information over 
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much greater distances through harsher RF environments than 
previously available, while reducing the size and cost of the tag 
IC. 

The secondary objects of this invention are to provided 
simple AM reception by the receiver circuit without having to use 
complex synchronization schemes, external frequency references 
such as quartz crystals and complex circuits like Costas loops; 

interrogator transmission power to be less than or equal to 
1 Watt, allowing unlicensed operation within FCC guidelines; 

extension of the range from interrogator to RFID tag; 

limitation of eavesdropping of signals by outside parties, * 

A 

and^ 

selective addressing of particular tags or communicating 
with more than one tag simultaneously in any given transmission. 

These and other objects are achieved by modulating a 
spectrally spread carrier with a pulse code waveform representing 
information pertaining to the article to which the tag is 
attached. 

One advantage of using a spread spectrum modulated signal is 
the enhanced interference rejection obtained during the 
demodulation process. The effect is a signal to noise gain over 
traditional narrow band broadcasting techniques. 

Using spread spectrum techniques gives good range with 
relatively little complexity on the tag. The high complexity is 
contained in the interrogator design. 

Other advantages are: selectively addressing a particular 
receiver r pulse code multiplexing allowing addressing of a 
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plurality of receivers in any given transmission, broadcast 
transmissions with low density power spectra for signal hiding, 
message encryption to discourage eavesdroppers, and high 
resolution ranging between transmitter and receiver. 



Although this invention was specifically designed for RFID 
tag communication, there are applications for it in hand-held 
walkie-talkies, pagers, mobile phones , cordless telephones, 
cordless microphones and musical instruments, cordless computer 
network communication links, and intercoms. 

Brief Descrxption of the ^Drawiit g 

Figure 1 is a simplified drawing of the type of radio 
frequency identification system to which this invention applies. 

r I 

Figure 2 is a block diagram of the transmitter part of the 
intertdgator . | 

Figure 3 is a series of time domain plots representing 
binary phase shift keying (BPSK) the carrier with a direct 

sequence pseud?o-random pulse code. 

I 

Figure 4 is a f^quency domain plot of an ideally spectrally 
spread carrier. 

Figures 5A-5B are a realistic time domain plot and frequency 
domain plot of t'he BPSK spectrally spread carrier. 

Figure 6/is a series of time domain plots representing pulse 
cimplitude modulating the spectrally spread carrier with a pulse 
code waveform. / / 

Figures 7A-7B are a realistic time domain plot and frequency 



domain plot of a pulse amplitude modulated non-spectrally spread 
carrier. ^ ^ 

Figures 8A-8B are a realistic time domain plot and frequency 
domain plot of a pulse amplitude modulated spectrally spread 
carrier. ^ 

Figure 9 is a block diagram of the transceiver in the REMOTE 
RFID tag. j 

Figure 10 is a time domain plot representing one data bit 
period of the received signal l+PNl(t)d(t) after the carrier has 
been removed. ^ 

Figure 11 is a time domain plot representing one data bit 
period of the received signal without carrier that has been gated 
by PNl(t) in sync. 

Figure 12 is a time domain plot representing one data bit 
period of the received signal without carrier that has been gated 
by PNr(t) that is 3 chips out of sync. 

Figure 13 is a time domain plot representing one data bit 
period of the received signal without carrier that has been gated 
by the logical compliment of PNl(t) in sync when d(t)= 1. 

Figure 14 ^is a time domain plot representing one data bit 
period of the received signal without carrier that has been gated 
by PNl(t) in sync when d{t)= 1. 

Figure 15 is a time domain plot representing one data bit 
period of the received signal without carrier that has been gated 
by the logical compliment of PNl(t) in sync when d(t)= -1. 

Figure 16^ is a time domain plot representing one data bit 
period of the received signal without carrier that has been gated 
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by PNl(t) in sync when d(t)= -1. 

Description of the Prefered Embodiment of the Invention 

Referring now to FIG 1, a typical arrangement of an RFID 
system includes a plurality of operator controlled interrogators 
5 A that communicate via RF links with a plurality of RFID tags B 
which are attached to articles C located somewhere in the 
vicinity of the interrogators. 

An interrogator transmits a signal to a particular tag 
requesting or updating the status of the article associated with 
10 that tag. Status information can include the article's name. 

m owner, address^ destination^ pertinent dates ^ weighty etc. 

m . ■ - 

O The tag receives the signal and awakens from its power 

3 conserving quiescent sleep state. The tag interprets the request 

and decides on a response which is then transmitted back to the 
^=|15 requesting interrogator. A receiver in the interrogator analyzes 
J^J the r^eturn signal ^ determining the status of the article. Its 
N ^location can be determined by triangulation with multiple 
'-1 : interrogators or multiple antennas. This information is then 

displayed to the operator. 

20 

^ Referring now to FIG 2v^a block diagram of the transmitter 

part of the interrogator transceiver, a crystal controlled 
^ oscillator 1 generates a constant amplitude sinusoidal carrier 
with a frequency of 2441.75 MHz. 
25 This carrier is modulated in the balanced modulator 2 by a 

pseudo-random direct sequence pulse code, PN2, generated by the 
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pseudo-noise (PN) generator 3, PN2 has a chip rate of about 40 
Mega-chips per second. 

The resulting spectrally spread carrier is then modulated 4 
by another pulse code waveform generated by combining a data 
waveform 5 and another pseudo-noise waveform, PNl(t) 6. The 
resulting signal to be transmitted is sent to a power amplifier 
7, and then to the antenna 8. 

The data waveform, d(t) represents information to be 
transmitted to the REMOTE and has a data rate of about 2 mega- 
bits per second. PNl(t) has a chip rate equal to or less than 
PN2. In this embodiment PNl{t) and d(t) are multiplied together 
to form the modulating unipolar waveform, 1+PNl ( t )d( t ) . 

The waveforms of FIG 3 refer in detail to operation of the 
first balanced modulation of the carrier. Modulation occurs by^ 
binary phase shift keying (BPSK) the original constant amplitude 
carrier 9, with the PN2 pseudo-random direct sequence pulse code 
,10. During the time when PN2 is low, the carrier is keyed with a 
180 degree phase shift from when PN2 is high 11. For 
illustration purposes, the sinusoidal carrier is shown at a much 
lower frequency >tiTet^^ihM been suggested for this embodiment. 

The resulting waveform has a power spectrum which is ideally 
spread according to the (sin(x)/x)**2 function shown in FIG 4. 
The center of the main lobe is at the original carrier frequency 
Fc. The mainlobe bandwidth (null to null) is now twice the clock 
frequency of the PN2 waveform Fg • A more realistic 
representation of the time domain signal and its power spectra 
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appears in FIG 5a and FIG 5b respectively. 

FIG 6 illustrates in detail the operation of the modulation 
of the spectrally spread carrier by the pulse code waveform 
1+PNl (t )d( t ) . The spectrally spread carrier 11 of FIGS is viewed 
over a much greater time period 12. One must keep in mind that 
there are over 150 cycles of the original carrier for every bit 
(amount of time between possible changes, high-to-low or low-to- 
high) of the l+PNl(t)d(t) modulating waveform 13. 

Pulse amplitude modulation involves multiplying the spread 
spectrum carrier by the modulating waveform 14. It is important 
to note that pulse amplitude modulating a non-spectrally spread 
carrier results in a power spectrum with an undesirable spike 15 
at the carrier frequency as shown in FIG 7a and FIG 7b. By 
speictrally spreading the carrier, the resultant power spectra is 
more acceptable as shown in FIG 8a and FIG 8b. 

Referring now to FIG 9, the receiver portion of the remote 
RFID tag receives signals via an antenna 16. In order to sense 
the existance of a signal meaningful to the REMOTE, the signals 
are sent to a lowpass filter 17. This voltage is compared to a 
value Vo in a comparator 18. If the voltage is greater, the 
comparator outputs a true, informing the sequential mode logic 19 
that a signal is present. The receiver is then initialized, 
awakening from its quiescent sleep state and the PNl(t) waveform 
generation circuitry is set to acquisition mode through the PN 
epoch controller 20. 

In an awakened REMOTE, the signal arriving at the antenna 16 



is sent to several stages of RF (S-band) amplification and 
filtering 21. As much RF amplification as attainable is 
provided. The bandpass filter characteristics are a center 
frequency of the original carrier (2441.75 MHz) and a bandwidth 
of around 84 MHz, which corresponds to the main lobe of the 
transmitted signal. Although this bandpass filtering is shown as 
a single block 22, the circuitry accomplishing this filtering 
will likely be distributed throughout the RF amplifier circuits. 

The resulting signal is sent to a full wave envelope 
demodulator 23, which recovers the amplitude modulating waveform 
as 1+PNl (t )d(t) . Some added lowpass filtering 24 and baseband 
amplification 25 further increases the voltage level of the 
waveform to a more useful value (approx. 0.5 Volts peak-to-peak). 

As seen in FIG lO^^the waveform 1+PNl (t)d(t) is essentially 
two-level in nature, exhibiting positive and negative transitions 
between the limits of 0 and Vs which correspond to the PNl(t) 
waveform, and a small amount of additive noise or interference. 
Here, PNl(t) is represented by the chip sequence: 1 11-1-1 
1 -1-1, and spans exactly one data bit period, Td. It can be 
assumed during this time period that d(t)=l; if it were a -1, the 
waveform would be inverted. In order to facilitate 
synchronization, d(t) is equal to 1 and thus non-transitioning 
during a preamble portion of the transmitted signal. 

Referring back to FIG 9, the transition pulse generator 26 
acts to differentiate the l+PNl(t)d(t) waveform, producing 
"spikes" at the transition times, which are then rectified 
(absolute value) to furnish a unipolar train of transition 
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derived pulses. Spectrally, this waveform is rich in the PNl(t) 
code clock frequency. It's injected into a free-running 
multivibrator 27 (or a phase-locked loop oscillator) which 
produces a synchronized pulse for every chip of the received 
signal. In effect^ the waveform produced is a relatively stable 
PNl clock waveform used by the PNl generator 28. Once 
synchronization to the incoming PNl sequence is achieved, the 
locked multivibrator 27 is used as the tag's clock for processing 
the incoming data and commands. If a return transmission is 
requested, the locked multivibrator 27 becomes the source for the 
tag transmitter carrier frequency. 

The PNl generator 28, running from the PN-clock waveform, 
generates the tag's version of the PNl(t) chip sequence. This 
will initially be time offset by an integral number of chips (n) 
from the sequence that ■ makes up the received waveform 
l+PNl(t)d(t) . The PN Sync Detector 29-eleminates this offset. 

The PN Sync Detector accomplishes its objective by doing a 
sequential correlation comparison. A MOSFET switch 30 gates the 
l+PNl(t)d(t) code received using the PNl code generated. If the 



two codes are in sync, the output of the gate is a waveform^FIG 
11, having an average value around Vs/2. If the two codes are 
unaligned, say offset by three chips, the gate output is a 
waveform^^FIG 12, having an average value around Vs/4 or less. By 
^ usual spread spectrum standards, correlation discrimination by a 
25 factor of two would be considered poor, but under very high 
signal to noise ratio (SNR) conditions, which are present in the 
forward link, it is acceptable. 
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The proper^ in-sync starting point for the PNl code sequence 
is discovered by generating PNl at all possible starting points 
and recording the results. Each starting point represents a 
waveform which is a possible candidate for being the correct in- 
sync PNl waveform. The candidate having the largest correlation 
value will be the one used. A more detailed explanation of this 
process follows. 

Upon initialization, the Sequential Mode Logic 19, in 
conjunction with the timing events Tl and T2 31, initializes the 
sample-and-hold (S&H) memories 32 and 33. T2 occurs later than 
Tl.\ The event of Tl causes the output of LPF4 34 to be stored in 
S&H #1 as value El. Likewise, T2 results in El being stored in 
S&H #2 as value E2. LPF4 is responsible for smoothing the 
correlation voltage ^producing a more accurate representation of 
the cptrelation than what is available from the broader LPF2 35 
which is matched to the bit period. Initially, the sequential 
mode logic sets the PN epoch controller 20 to produce a shift- 
register word which is loaded into the PN generator's shift 
-register directing the generator to produce the PNl code 
sequence at a particular ;^ t n aring ^point called epoch-1. If the 
code sequence is made up of L chips, there are L possible 
starting points and L possible epochs. (In the example waveform 



corresponding to the largest correlation, with 1 <= n <= L. 
Once the generator is producing PNl based on epoch-l, the 
correlation value output from LPF4 is transferred to S&H #1 at Tl 



in Figure 4, 




The PN sync detector must find epoch-n 





and then to S&H #2 at T2. 

Next, the chip sequence based on epoch-2 is generated. The 
output from -trofih LPF4 is again sent to S&H #1 at Tl. If El is 
greater than E2, the correlation at epoch-2 is greater than the 
correlation at epoch-1. This is communicated by the output of 
the comparator 36 to the sequential mode logic which transfers El 
to S&H #2 and makes note of the epoch value n (in this case 2) 
for which the tranfers occurred. If El had been less than E2, 



E2 remains unchanged. The acquisition search continues with 



epoch-3 and so on until all epoch values have been tried. In the 
end^E2 will represent the largest correlation value found, and 
the. sequential mode logic will know which epoch value to use. 

There is the possibility that proper alignment was not 
achieved because a correlation value mistake was made due to 
noike. To avoid this, the entire^^^ ^^^^^ ^process is repeated 
two more times. PN synchronization success is declared if the 
epoch chosen is the same for all three tries (or two out of three 
tries). 

Once PNl has been synchronized with the received signal, the 
REMOTE is. ready to detect data. Remember, throughout the 
acquisition period the LOCAL interrogator has been transmitting 
with d(t) equal to 1. This period will last for several hundred 
data bit periods. The start of a message packet will be 
indicated by a data transition from 1 to -1, followed by a block 
of unique bits which the data management logic will recognize as 
packet synchronization. 
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Data detection itself takes place as the received signal 
l+d(t)PNl(t) is gated 30 by the tag's generated PNl and sent to 
LPF2 35. Likewise, it is gated by PNl' s logical compliment 37 
and sent to LPFl 38. When d(t) is equal to 1, the input to LPFl 
is the waveform seen in FIG 13, and the corresponding input to 
LPF2 is seen as FIG 14. The average value of the waveform sent 
to LPF2 is clearly greater. When d(t) is equal to -1, the inputs 
to LPFl and LPF2 are as shown in FIG 15 and FIG 16 respectively. 
Here, the average value of the waveform sent to LPFl is greater. 

The two low pass filters, LPFl and LPF2^are approximations 
to matched filters (if a simple RC filter is used, then RC = 
1.3/(2pi*Td) ) . They function to maximize the SNR at the end of 
the bit period, Td, for input to the comparator 39. End of bit 
period timing is provided by a state AND gate 40 operating from 
the' PNl generator. This gate toggles a J-K flip-flop 41 whicb 
temporarily stores the value of d(t) until it can be transferred 
into data management logic 42 and RAM 43 . 

Each sequential data bit provides its own detection 
reference to the comparator. Also, as the received signal level 
varies due to movement of the tag or interrogators or changes in 
the RF environment, the data detection decision reference is 
self-adjusting, giving rise to the designation "per-bit" 
reference for data detection. 

Once the forward link data has been detected, the data 
management logic 42 ^executes required actions^ and assembles the 
return link data packet message. 

The transmitter within the tag will generate the return link 
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carrier by multiplying the PNl clock frequency produced by the 
locked multivibrator 27 by a factor M using a frequency 
multiplying circuit 44. This carrier is then amplified 45 and 
pulse amplitude modulated 46 by the return data packet waveform. 
Although an amplitude modulation scheme is shown, other 
modulation schemes using spread spectrum techniques are possible 
and desirable. This signal is then sent to the antenna 47. The 
power amplifier stage may be less than .5 milliwatts due to the 
power available within the tag. Because of this low radiated 
power, spectrally spreading the return link carrier may not be 
necessary, and an additional pseudo-noise waveform analogous to 
PNl, need not further encrypt d(t). When higher powers are 
desired, a spectrally spread scheme would be used to satisfy FCC 
unlicensed rules. To extend the range of the system, spread 



ti5 spectrum techniques are -desirable in the tag transmitter. 



While the preferred embodiments of the invention have been 
described, modifications can be made and other embodiments may be 
devised without departing from the spirit of the invention and 
the scope of the appended claims. 

WHAT IS CLAIMED IS: 



25 



14 



